VULNERABILITY INTELLIGENCE

CVE-2000-0525

CVSS score10 HIGH
EPSS probability2.63%
CISA KEVNot currently listed
Published2000-06-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.

Primary references